Automated Packetless Network Reachability Analysis

2. The system as recited in claim 1, wherein the query concerning the virtual network comprises determining one or more ports at a virtual computing device of the virtual network that are reachable from another computing device.

5. The system as recited in claim 1, wherein the virtual network rules comprise rules for networking security standards, or comprise custom rules defined by the client for application to the virtual network.

6. The system as recited in claim 1, wherein the descriptive information concerning the virtual network comprises one or more of: an identification of instances of networking primitives that are implemented in the virtual network, descriptions of the instances, descriptions of relationships among the instances, or descriptions of interfaces or access points to external entities.

13. The method as recited in claim 8, wherein the descriptive information concerning the virtual network comprises one or more of: an identification of instances of networking primitives that are implemented in the virtual network, descriptions of the instances, descriptions of relationships among the instances, or descriptions of interfaces or access points to external entities.

16. The one or more non-transitory computer-readable storage media as recited in claim 15, wherein the query concerning the virtual network received from the client is posed in an expressive query language.

19. The one or more non-transitory computer-readable storage media as recited in claim 15, wherein the virtual network rules comprise rules that express common relationships or interactions among various networking primitives that are implemented in the virtual network.